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ELECTRONIC CHECKOUT SYSTEM FOR SPACE 
VEHICLES 

Gary J. Woods, Titusville, Walter E. Parsons, Kissimmee, 

Harold G. Johnson, Eao Gallic, George M. Preston, p 
Indian Harbor Beach, Thomas S. Walton, Merritt 
Island, and Jacob C. Moser, IndialaMic, Fla,, >i!Ss?gBors 
to the United States of America as represented by the 
Administrator of the National Aeronautics and Space 
Administration 

Continuation-in-part of application Ser. No. 621,746, ^ 

Mar. 7, 1967. This application Nov. 7, 1969, Ser. 

No. 874,958 

lot. Cl. G05f 23/02 

U.S. CL 340—172.5 14 Claims 


ABSTRACT OF THE DISCLOSURE 

A system for testing a space vehicle thoroughly, ac- 
curately, and with a minimum of engineering personnel. ^ 
It checks out thousands of functional elements by utiiiz- "" 
ing digital computer systems. These computer systems 
automatically send and monitor routine, repetitive and 
prelaunch commands. 


The invention described herein was made by employees 
of the United States Government, and may be manufac- 
tured and used by or for the Government of the United 
States of America for governmental purposes without the o 
payment of any royalties thereon or therefor. 

This application is a continuation-in-part of copend- 
ing application Ser. No. 621,746, filed Mar. 7, 1967 now 
abandoned. 

This invention relates to a control and monitoring sys- ^ 
tern for a plurality of condition responsive devices, and 
more particularly to a check out and monitoring system 
for a spacecraft and its associated ground support equip- 
ment. 

The evolutionary development of man exploration of 4 
space has progressed from suborbital space flights lasting 
only minutes to earth orbital flights lasting many hours. 
As the more advanced space projects unfold manned 
space flights will progress from the present state of earth 
orbital missions lasting several days to translunar, cis- 4 
lunar, and lunar landing missions which will require at 
least one week, and possibly several weeks to complete. 

To sustain men for extended periods of time in the 
hostile environment of space it is, of course, necessary to 
provide thorough flight-tested and dependable life support 5 
guidance and control communications, thermo protection, 
and other electrical and mechanical spacecraft systems. 

It has been found that as mission durations increase, 
each system becomes more complex and more sophisti- 
cated. 5 

This increase in system sophistication results in an at- 
tendant increase in the need for highly trained test evalua- 
tion personnel and more complex ground checkout equip- 
ment. To accomplish extended missions of increasing 
launch frequency with the test philosophy and systems q 
heretofore used would require many more highly trained 
engineering personnel capable of continually evaluating 
large quantities of preflight checkout data. Increasing the 
number of trained engineers for monitoring and checking 
out more complicated space vehicles has not proven to be q 
feasible due to the time and expense necessary to train 
qualified personnel for assessing checkout equipment asso- 
ciated with a space vehicle. 

Another problem encountered in utilizing large num- 
bers of personnel is in coordinating the commands being 7 
transmitted to the space vehicle and received therefrom 
during the prefiight acceptance checkout operation. 


2 

Heretofore, in monitoring functional components of a 
spacecraft and its associated ground supporting equip- 
ment, a command station was positioned in close proxim- 
ity with the space vehicle and monitoring equipment was 
j located at a remote station. As a result, one group of 
checkout personnel was sending the commanding signals 
to the space vehicle, while another group of monitoring 
personnel was receiving the information from the space 
vehicle. Normally, a co-ordinator was in communica- 
Q tion with both the command station and the monitoring 
station attempting to co-ordinate the signals being sup- 
plied to the space vehicle and returned therefrom. Such 
has not proven to be practical, since frequently impor- 
tant is lost in co-ordinating the information. For example, 
5 if a command signal were sent to start an engine or simi- 
lar device, and it was important to monitor the valve 
setting for the device, the command engineer would know 
that a light associated with the valve settings should go 
out immediately upon starting the engine, and if there 
0 were a small lapse of time between the starting of the en- 
gine and the light going off, such would generally indicate 
that there is a malfunction in the valving system or the 
engine. When the monitoring station is located at a re- 
mote distance from the command station frequently this 
5 small lapse of time between sending a command signal 
to the spacecraft and receiving a response is missed due 
to the fact that the engineer in the monitoring station 
is merely looking to determine if the particular function 
has taken place. 

0 Heretofore, in order to provide communications be- 
tween the command station and the space vehicle which 
was being monitored thousands of wires were connected 
therebetween and each wire was connected to a respective 
functional element under command or being monitored. 
5 Not only has this vast number of wires been expensive : 
they have proven to be impractical in that a spacecraft, 
or the various systems associated therewith may be moved 
several times during its testing operation and each time 
that such is moved, for example, from a test station to 
^ the launching pad, the wires communicating between the 
command station and the monitoring station and the 
spacecraft had to be disconnected and reconnected. Such 
has proven to be a long and tedious job requiring many 
man hours and frequently interferring or delaying launch 
5 schedules. Since the cables are fed through the hatch in 
the spacecraft, such also restricts the area within the 
spacecraft provided for the astronaut. 

Another problem which prevented cables in the vicinity 
of fifteen miles long from being in checkout system here- 
0 tofore, was attenuation or degradation of the signals. If 
degradation of signals took place, such would result in 
valuable command and monitoring signals being lost in 
the transmission. Such is especially true where the space 
vehicle is being tested in an area where electrical noises 
are subject to be picked up by the transmission cables. 

It is not practical nor feasible to utilize temporary 
block houses for the command station where complicated 
space vehicles are being checked out, which would nor- 
mally require long checkout periods, if the procedure 
0 and method of checking out the space vehicle were uti- 
lized similar to those used in the past on less sophisticated 
space vehicles. One reason being due to the fact that 
the area in the immediate vicinity of the space vehicle is 
^ normally a hazardous area due to toxic propellants used 
in the space vehicle and the possibility of explosion of 
such. 

Moreover, it is desirable that the command stations be 
as comfortable as possible for the test engineers, since 
Q tests would frequently last as long as twenty hours. Where 
the command stations are of a temporary nature it is not 
economically feasible to construct such to provide test 



engineers with a maximum of comfort during the long 
test. 

In accordance with the present invention, it has been 
found that the foregoing difficulties and disadvantages 
presented by the prior checkout and monitoring equip- 
ment discussed above may be overcome by providing a 
novel acceptance checkout equipment system for space- 
crafts and the like. The acceptance checkout equipment 
system is capable of sending command signals to a plu- 
rality of functional components carried on a space vehicle 
and in. its associated ground support equipment, as well as 
for monitoring other functional components, such as sens- 
ing probes and meters carried on the spacecraft, during 
the testing operation. 

The spacecraft prelaunch automatic checkout equip- 
.ment system constructed in accordance with the present 
invention includes two systems. One system for sending 
command signals to functional elements carried on the 
spacecraft and in its associated ground support equip- 
ment is generally referred to as the command system or 
the up-link portion of the overall system. The second 
system is generally referred to as the monitor system 
wherein functional elements carried on the spacecraft 
and its associated ground supporting equipment are moni- 
tored and signals are transmitted back to a control room 
so that computers and engineers can analyze the informa- 
tion being received in order to determine if the func- 
tional component being monitored are operating prop- 
erly. Some of the information being sent to the control 
room is displayed in engineering units, such as volts, 
pounds, temperature, etc., so that a test engineer can 
readily analyze such. 

The command system constructed in accordance with 
the present invention includes the following basic parts: 
(1) A plurality of control start-modules located in a re- 
mote command center, (2) means for selectively activat- 
ing a control start module for generating a command 
signal in digital form identifying a particular functional 
component located in a spacecraft, or in its associated 
ground support equipment and the function to be per- 
formed thereon, (3) a communication means, hereinafter 
referred to as communication unit executor or “CUE” 
for scanning the control modules and temporarily stor- 
ing the command signal from an activated module, (4) a 
transmission validity checking circuit forming a part of 
the communication means for comparing the transmitted 
command signal with a redundant command signal for 
determining transmission errors, (5) a computer coupled 
to the output of the communication means for receiving 
the command signal from the communication means and 
generating a functional code in digital form responsive 
thereto, (6) data transmission and verification convert- 
ing means coupled to the output of the computer for 
transforming the functional code from the computer into 
a set of sequential digital words comprising a frame of 
bits and its complement for transmission over long dis- 
tance with a minimum of degradation, and (7) a receiver 
decoder coupled to the output of the data transmission 
and verification converting means for comparing each 
frame of sequential bits with its complement, and for 
transmitting a signal indicative of the desired function 
to be performed on the selected functional component 
when the frame of bits compare with its complement. 
The control start modules are such that they generate 
a plurality of identifying parallel bits of information when 
activated and a portion of the parallel bits represent an 
address signal. The remainder of the parallel bits repre- 
sent the particular function which is to be performed. 

While the up-link portion of the command checkout 
system provides a reliable system wherein command sig- 
nals may be automatically sent to functional elements on 
a spacecraft under the control of a computer, it also pro- 
vides a manual override system wherein test engineers 
located in the control center may selectively send com- 
mand signals to the functional elements carried in the 


space vehicle, and in its associated ground support 
equipment. 

The space vehicle is divided into a plurality of systems 
for the convenience of sending command signals thereto, 
and monitoring such. Examples of such systems or sub- 
systems are, the spacecraft in which the astronauts ride, 
the lunar excursion module, if one is carried on the space 
vehicle, the service module, and the ground support 
equipment for the space vehicle. The space vehicle may 
be divided into many subsystems, and usually the con- 
trolling factor in determining how such should be divided 
is governed by the major components of the space vehicle 
and the most convenient manner of grouping the func- 
tional elements. It is evident that is would be desirable 
that the spacecraft be treated as at least one subsystem, 
since normally the equipment in the spacecraft is tested 
at test locations prior to assembling the space vehicle, 
and after the space vehicle has been assembled on the 
launch pad such is checked out again prior to launching. 
Thus, it can be seen for the purpose of grouping the 
transducers associated with a space vehicle, in order to 
minimize the cabling within the systems, while allowing 
the systems to be transported from one location to an- 
other with a minimum amount of electrical hookups each 
time such is transported, it is desirable that such be 
divided into subsystems. 

As previously mentioned, in checkout equipment here- 
tofore used, thousands of wires were connected and dis- 
connected from the subsystems each time such were 
moved from one location to another. The preffight accept- 
ance checkout equipment system constructed in accord- 
ance with the present invention eliminates such mass 
hookups and disconnections. 

The monitoring device constructed in accordance with 
the present invention includes the following basic parts: 
(1) A plurality of functional components carried in each 
system associated with the space vehicle, (2) a transducer 
coupled to each functional component for generating a 
signal indicative of the operating condition of the re- 
spective functional component, (3) a pulse code modu- 
lator associated with each system for scanning and re- 
ceiving the signals from the transducers of a system and 
converting the signals into binary words of sequential 
bits of digital information, (4) means for interleaving 
the words of the sequential bits of digital information 
from the pulse code modulators for producing a sequen- 
tial chain of binary bits of information, (5) a remotely 
located decommutator provided for receiving the chain 
of binary words from the interleaving means (the decom- 
mutator may be located many miles from the interleav- 
ing means), (6) the decommutator reconstructs the chain 
of sequential binary bits of information into binary words 
and feeds the reconstructed words out in parallel form, 
(7) a computer provided for receiving the binary words 
from the decommutator and by programmed adaptive 
technics checking them against preprogrammed toler- 
ances, (8) the computer converting the binary words 
into signals capable of activating display media, and 
(9) display media located in the control room connected 
to the output of the computer for receiving the signals 
from the computer and producing information in the 
form adapted to be recognized by the human eye and 
comprehended by test engineers. The display media in- 
cludes cathode ray tubes capable of displaying the infor- 
mation received from the computer on its screen in alpha- 
numeric characters, analogue and digital modules which 
include meters, such as volt meters and the like, and re- 
corders for making permanent records of the information 
being received during the monitoring operation. 

Accordingly, it is an object of the present invention to 
provide a preflight acceptance checkout equipment sys- 
tem which minimizes the problems outlined above in con- 
nection with testing and monitoring a space vehicle. 

Another important object of the present invention is to 
provide a preflight acceptance and checkout equipment 
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system, wherein command signals being received there- Other objects and advantages of this invention will be- 

from are coordinated in a central test station remotely come more apparent from a reading of the following de- 
iocated from the space vehicle. tailed description and appended claims taken in conjunc- 

Still another important object of the present invention tion with the accompanying drawings wherein: 
is to provide a command and monitoring system for a ^ PIG. 1 is a block diagram illustrating a prehiglit ac- 
space vehicle and the like, wherein a relatively few per- ceptance checkout equipment system constructed in ac- 

sons can perform the entire command and checkout cordance with the present invention; 

operation. FIG. 2 is a block diagram illustrating a portion of the 

Another object of the present invention is to provide command system which forms a part of the acceptance 

a command and monitoring system for a space vehicle jq checkout equipment system which includes start modules 
which is program adaptive and capable of processing the that are located in the control room, a communication unit 

presenting large amounts of data in engineering units executor system, and the up-link computer; 

such as temperature, volts, etc. FIG. 3 is a pictorial view of an R-start module utilized 

A further important object of the invention is to pro- within the system; 
vide a checkout and monitoring system for a space ve- J 5 FIG. 4 is a pictorial view of a C-start module which is 

hide which is completely under the control of test engi- utilized in the system; 

neers at all time, but lends itself to any degree of auto- FIG. 5 illustrates in block form a forty-eight bit mes- 

mation desired, and is expandable in modular blocks to sage which is transmitted by a data transmission and 

meet the checkout and launch control requirements of verification converter to a digital test command system 

the foreseeable future. 20 carried within a space vehicle or in its ground support 

Still another object of the present invention is to pro- equipment; 
vide an acceptance checkout equipment system for a space FIG. 6 is a block diagram illustrating a digital test corn- 

vehicle and the like, wherein signals are transmitted mand system which may be carried in the spacecraft and 

throughout the system in a step by step manner and a includes a receiver decoder and translating circuitry for 

check is made for transmission errors at each step. 25 selecting a particular functional element within the 

Still another important object of the present invention spacecraft or space vehicle; 

is to provide a command and monitoring system for FIG. 7 illustrates a message which includes twenty-four 

space vehicles which permits independent testing of ma- binary bits of information which are utilized for selecting 

jor subsystems of the space vehicle in remote areas from a particular functional element carried within the space 

a central command and monitor station. 30 vehicle or its associated ground support equipment and 

Another important object of the present invention is to designates the function to be performed thereon; 

provide a command and monitoring system for a space FIG. 8 illustrates another example of a message that 

vehicle where there is a minimum amount of signal deg- may be utilized for selecting a particular functional com- 

radation and attenuation between the control center and ponent located within the space vehicle or in its ground 

the space vehicle being monitored. 35 support equipment and the function to be performed 

Still another important object of the present invention thereon; 
is to monitor functional elements carried on a space ve- FIG. 9 illustrates in block form the circuitry and the 

hide and present the information in a remotely located flow of information therethrough for selecting a partic- 

control room in engineering units, such as pounds, volts, ular relay module; 

temperature, etc., so that such can be readily analyzed by 40 FIG. 9 A illustrates in block form the circuitry of an 
test engineers. R module; 

A further important object of the present invention is FIG. 10 illustrates the circuitry in block form and the 

to provide a monitoring system for a space vehicle and flow of information therethrough for selecting an ana- 
the like, wherein a high speed computer scans pulse code logue module; 

modulation systems associated with the space vehicle and 45 FIG. 1 1 illustrates in block form components of the 
ground support equipment for continuously checking for digital to analogue converting module; 
out of tolerance conditions of the functional components FIG. 12 illustrates one particular console which is util- 

carried within the space vehicle, and presenting signals ized within the control center for co-ordinating the com- 

to test engineers located in a remote control center of mands being sent through the command system and the 

such out of tolerance conditions. 5 q information being received back through the monitoring 

Still another important object of the present invention system; and 
is to provide a command and monitoring device for a FIG. 13 illustrates in block form a plurality of sensing 

space vehicle, wherein test engineers are not burdened elements and transducers carried within the space vehicle 

with overwhelming amounts of repetitive and tedious data or its ground support equipment, and a pulse code modu- 

validation during long periods of testing of systems of a 55 lator for monitoring such. 

space vehicle and especially during the critical launch Referring now in more detail to the drawing where FIG. 

phase of a space vehicle. 1 illustrates in block form the major components of the 

Another important object of the present invention is preflight acceptance checkout equipment system for a 

to provide a command and monitoring system for a space vehicle 10 and its associated ground support equip- 

space vehicle and the like, wherein signals are transmitted ^0 i^ent 11, and wherein the up-link portion or command 
between a remotely located command station and the system is illustrated on the left-hand side of the drawing 

space vehicle in digital form so as to minimize the amount and the down-link portion or the monitoring system is il- 

of cabling between the command station and the space lustrated on the right-hand side of the drawing. The space 

vehicle. vehicle is illustrated as being divided into three systems, a 

A further important object of the present invention is 55 spacecraft 12, a service module 13, and a lunar excursion 
to provide a command and monitoring device for a space module 14 . 

vehicle and the like, wherein there is an interconnection The portion of the up-Iink or command system which 

between the command portion of the system and the is located in a central control room, generally designated 

monitoring portion of the system for providing commu- at 15, may be many miles from the space vehicle being 

nication therebetween. 79 tested and includes subsystems referred to as “start mod- 

Still another object of the present invention is to pro- ules” 16 , which are connected through junction boxes 17 

vide a command and monitoring device for a space ve- to a subsystem referred to as the “communication unit ex- 

hicle and the like, wherein the superior skill of a test ecutor” 18 . 

engineer over that of a machine in responding to com- The start modules communicate with the rest of the 
plex and unexpected situations is utilized to the maximum. 75 command system through the communication unit execu- 
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tor IS, and each are provided with a plurality of functional 
switches which enables the test engineers located within 
the control room 15 to send command signals through a 
communication unit executor 18 to an up-link computer 
19. When a test engineer desires to send a command sig- 
nal to the functional components located within the space 
vehicle or in its ground support equipment, he merely de- 
presses the desired functional switches located on a re- 
spective start module 16 to load the information into the 
start module. After he has loaded the information into a 
particular start module he then depresses an execute but- 
ton which sends a signal to the communication unit execu- 
tor 18 indicating that the particular start module is ready 
for interrogation. The communication unit executor 18 in- 
cludes a scanner which is scanning the start modules, and 
when such detects an execute signal from a particular mod- 
ule it interrogates that particular module and transfers the 
information which is in parallel form from the activated 
start module to a temporary storage unit located therein. 
A redundant signal corresponding to the initial signal sent 
from the start module is automatically sent to the com- 
munication unit executor 18 so that the comparators lo- 
cated within the communication unit executor can com- 
pare the original signal sent with the redundant signal in 
order to determine if the signal was transferred properly. 
The communication unit executor 18 in turn, transmits an 
interrupt signal to the up-link computer 19 signifying to 
the computer that such is loaded and ready to transmit in- 
formation thereto. The up-link computer 19 sends a signal 
back to the communication unit executor 18 indicating 
such is ready to receive the information or command sig- 
nal from the communication unit executor 18 . The infor- 
mation is then transferred from the communication unit 
executor 18 into the up-link computer 19 , which in turn, 
sends a corresponding signal in parallel form back to the 
communication unit executor in order to determine if 
there were any transmission errors. Assuming that there 
were no transmission errors between the communication 
unit executor 18 and the up-link computer 19 , the com- 
puter then will decode the signal and transmit a corre- 
sponding signal in the form of two tv/elve bit parallel 
words to a selected data transmission and verification 
converter 20. The information coming into the computer 

19 determines which data transmission and verification 
converter 20 and module 26 is to be selected. 

Normally, the up-Iink computer 19 and the data trans- 
mission and verification converters 20 are located in a com- 
puter room which is in the same building with the master 
control room 15 from which the command signals were 
initiated. The data transmission and verification converter 

20 v/iil receive the two twelve bit parallel words and con- 
vert such words into a message comprising a pair of 
twenty-four bit words in serial form. Each of the tv/enty- 
four bit serial words contain a twelve bit word in serial 
form and a redundant twelve bit word (see FIG. 5). Thus, 
the information being transmitted from the data transmis- 
sion and verification converter 20 is in the form of a 
forty-eight bit message consisting of two twenty-four bit 
words. 

Each data transmission and verification converter 20 is 
connected by a respective cable 21 to a digital test com- 
mand system 22 carried within the space vehicle 10 or its 
associated ground support equipment 11. In some instances 
the distance between the data transmission and verification 
converters 20 and the digital test command system 22 lo- 
cated within the space vehicle may be as far as fifteen 
miles or more. By transmitting the information therebe- 
tween in trains of binary bits of information the likelihood 
of degradation and attenuation of the signals is consider- 
ably less than would be the case if analogue signals were 
transmitted directly from a control room to a remotely lo- 
cated spaced vehicle or testing area. 

Another advantage of transmitting information from 
the master control room to the space vehicle in a coded 
binary word is that a single transmission cable, such as 21, 
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may be utilized instead of using thousands of cables con- 
nected directly between the command station and the space 
vehicle being checked out. 

By incorporating the majority of the test equipment 
within a master command center and utilizing a single 
^ cable between the data transmission and verification con- 
verters 20, and the subsystems 12 through 14 of the space 
vehicle such enables the subsystems to be checked out 
and monitored at various locations and then be trans- 
ported to a different location with a minimum amount of 
disconnecting and reconnecting cables. Not only is dis- 
connecting and reconnecting thousands of cables time con- 
suming, but the vast number of connections enhance the 
possibility of errors during the checkout period frequently 
15 interferring with testing and launch schedules of space 
vehicles. In the checkout system constructed in accord- 
ance with the present invention the digital test command 
systems 22, which include a receiver decoder 23, may be 
placed on board the spacecraft and moved with the space- 
20 craft as such is shifted from one location to another there- 
by, requiring only that two cables be disconnected and 
reconnected. 

The receiver decoder 23 takes the first twelve bit v/ord 
of the forty-eight word bit message and checks it against 
25 the successive redundant tv/elve bit word for determin- 
ing if there are any transmission errors. Then it checks 
the third twelve bit word with the fourth twelve bit word 
for determining if there are any transmission errors there- 
in. If a transmission error occurs, the receiver decoder 
30 23 will send a signal back to the data transmission and 
verification converter 20, which in turn v/ill send a sig- 
nal to the up-link computer 19 indicating a transmission 
error occurred. The up-link computer 19 will then send 
a signal back through the communication unit executor 
35 18 to a command monitor unit 24 located in the control 
room, which generates a display signal that can be ob- 
served by a test engineer. 

By sending the information to the receiver decoders 
23 over cables 21 in the form of two twenty-four bit 
40 chains each including a twelve bit word and its redundant, 
such increases the speed in which information can be 
fed to the receiver decoders 23, Such is due to the fact 
that other messages or command signals can be placed on 
line 21 immediately behind a previous signal without hav- 
45 ing to wait for a check signal to be sent back to the data 
transmission and verification converter 20. For example, 
the cable 21 may be loaded with several messages simul- 
taneously. one trailing the other. 

In addition to having a receiver decoder 23 in each digi- 
50 tal test command system 22 associated with a particular 
system of the space vehicle or its ground support equip- 
ment, a module selecting circuit, generally designated at 
25, and a plurality of modules 26 are included in each 
system for selecting a desired functional element within 
55 each system. 

The receiver decoder 23 selects the desired functional 
module in a Christmas tree-like manner. For example, the 
coded signal which is in the form of parallel binary bits 
of information, first selects a group of base plates A, B, 
60 C or D (see FIG. 6) on which the desired module to be 
activated is located, then it selects one of eight base plates. 
Each of the base plates includes four modules of the relay 
type or digital to analogue type, R module and DAC 
module, respectively. An R module contains four sub- 
65 groups of relays 1, 2, 3 and 4, respectively, any one of 
which may be activated by the coded signal. Each sub- 
group of relays contain four relays. For example, 1-1 
through 1-4 (see FIG. 9). Thus, there are sixteen relays 
in an R-module. If it is desired that the particular func- 
70 tional element, such as the switch, be closed so as to test 
the circuitry in which the switch is located, normally such 
is accomplished by placing a relay contact in shunt and/or 
series with the control switch so that by selecting a par- 
ticular relay located within a module such can be ener- 
75 gized to close the circuit for testing the operation of such. 
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A digital to analogue converter module DAC is utilized 
for sending an analogue signal to one of the functional 
elements v/ithin the space vehicle 10 or its ground support 
equipment 11. The digital test command system which 
includes the receiver decoder 23 and the modules R and 
DAC is discussed more fully below in connection with 
FIGS. 6 and 9. The digital test command system may 
consist of any conventional, well-known circuits. Suitable 
circuits which may be used are disclosed in a publication 
entitled “Digital Test Command System,’’ Accession No. 
N69-75688, NASA-CR-104080. This publication, as 
well as those mentioned hereinafter, is available to the 
public from the Clearinghouse for Federal Scientihc and 
Technical Information, Port Royal Road, Springfield, Va. 
22151. 

Thus, it can be seen that the brief description of the 
command system, which is considered to be the up-link 
portion of the preflight acceptance checkout equipment 
system, that a test engineer in a remotely located control 
room can send command signals for selectively operating 
functional components within a space vehicle and its asso- 
ciated ground support equipment for testing the opera- 
bility of such. Moreover, the up-link computer 19 is pro- 
grammed so that such can automatically send routine and 
rex^etitive commands to the space vehicle during the check- 
out operation in order to speed up the checkout opera- 
tion, as well as relieving test engineers of tedious routine 
checks. If during the checkout portion, which is under 
control of the computer, a malfunction or a fault occurs, 
then a signal is produced by the computer and sent to 
the command monitor unit 24, via the communication 
unit executor IS, located within the control room so as 
to notify the test engineer of such. When the test engi- 
neer’s attention is attracted by such a false or malfunc- 
tion indication, he then takes the appropriate action to 
correct the condition. 

The command monitor unit 24 accepts and displays 
four types of information transferred from the communi- 
cation unit executor system 18. These four types are iden- 
tified as CUE status data, computer peripheral equipment 
status data, digital test command system malfunction data, 
and CUE-start malfunction data. The CUE status data 
provides a visual display of the location of the CUE scan- 
ner address. The digital test command system malfunc- 
tion display has four readout displays, labeled group, base 
plate, module, and subgroup, for indicating whether an 
error takes place in sending a coded signal to the com- 
ponents. The manner in which the coded signals are sent 
to these components and an error check signal is sent back 
is discussed more fully below. 

The information coming into the control monitor unit 
24 is successively displayed within a plurality of banks 
so that the first malfunction shall appear in an upper bank, 
the second malfunction on the second bank, et. After the 
test engineer has corrected the malfunction he may reset 
the command monitor unit enabling the particular bank to 
receive additional malfunction information. If the com- 
mand monitor unit is filled to capacity with error indica- 
tion information, a signal is sent to a status register located 
within the communication unit executor system as is more 
fully discussed in connection with FIG. 2. The command 
monitor unit may comprise any conventional, well- known 
display device. One suitable display device is disclosed in 
a publication entitled “ACE^S/C Command Monitor 
Unit,” Accession No. N69-75686, N AS A-CR™1 04079. 

In any checkout and launch control system, the ques- 
tion of how engineering talent can be most profitably and 
efficiently utilized is foremost in the mind of the test opera- 
tion director. To accomplish sophisticated missions where 
launch windows are narrov/, little time can be allotted to 
the engineering personnel for scanning large quantities 
of raw spacecraft data. However, to insure proper sys- 
tem operation at lift-off, large quantities of data from the 
spacecraft must be scanned and compared with preset 
tolerances or limits. In some of the checkout or monitor- 
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ing systems for space vehicles heretofore used, the data 
received during the testing or monitoring operation of the 
space vehicle v/as frequently stored for later analysis. 
However, such has not proven to be practical or feasible, 
^ since most launch schedules require quick decisions and 
dictate that test conditions be constantly and progressively 
changed. 

The monitoring system constructed in accordance with 
the present invention is under computer control so that 
jQ signals or information produced during the monitoring 
operation can be automatically compared with preset toler- 
ances or limits within a down-link computer relieving test 
engineers of such routine functions. When there is a mal- 
function or out of tolerance signal produced, the test 
15 engineers are notified of such by the computer. Such 
relieves the test engineers of the burden of analyzing over- 
whelming amounts of repetitive and tedious data during 
long periods of testing and especially during the critical 
launch phase, permitting their skills to be utilized to 
20 analyze unexpected problems, and to remedy such situa- 
tions. In order to aid the test engineers in the analysis of 
the information being received during the monitoring 
operation, the information is presented in engineering 
units, such as pounds per square inch, volts, temperature, 
2.5 etc., on the face of indicia bearing media, such as cathode 
ray tubes. 

For aiding in monitoring functional elements, such as 
fuel cells, temperature gauges, oxygen meters, etc., car- 
ried within the space vehicle, the space vehicle is divided 
30 into a plurality of systems. Each system has a plurality 
of sensing elements 27 therein, which are utilized for 
measuring certain parameters, and there is a transducer 
associated with each sensing or functional element 27 in 
order to produce a signal indicative of the measurements 
35 being made (see FIG. 13). Each system has a pulse code 
modulator 28 associated therewith for periodically and 
systematically scanning the transducers 27 located within 
the system and digitizing the signals received therefrom. 
In other words, the signals received from the transducers 
40 are converted by the pulse code modulator 28 into binary 
code form representing the value of the samples. This 
binary code is a string of “on-off” pulses denoting a plural- 
ity of binary bits of information in the form binary I’s 
and binary O’s. The pulse code modulator converts the 
signal from the transducers into eight bit binary words. 
Each word is a literal representation in binary form of 
the value of the sample voltage from the transducer. The 
pulse code modulator may be constructed of any conven- 
tional, well-known circuits. Suitable circuits are disclosed 
^ in a publication entitled “Pulse Code Modulation Sys- 
tern,” Accession No. N69-75692, N ASA-CR- 1 04075 . 

Each of the pulse code modulators produces a chain of 
output words on its output and transmits the chain of 
binary bits of information to a pulse code modulation data 
interleaver 29. 

In FIG. 1 of the drawings, there are four pulse code 
modulation data gathering systems 28 for monitoring 
parameters, each of which may, for example, produce a 
serial output of 51.2 kilobits per second. The interleaver 
29 is operated at four times the speed of any one of the 
^ pulse code modulator systems 28 and interleaves the 
serial trains from the four systems into a high speed data 
train of 204.8 kilobits per second comprising all of the 
information thus gathered. The interleaver may consist of 
^uy conventional, well-known circuits. Suitable circuits 
are disclosed in a publication entitled “Miniaturized Data 
Interleaving System,” Accession No. N69-75689. NASA- 
CR~i 04074. 

The train of binary bits of information leaving the inter- 
7Q leaver 29 is fed in the embodiment illustrated over a hard 
line 30, such as a coaxial cable to a decommiitator 31, 
which is generally located within the same building as the 
master control room. It is within the scope of this inven- 
tion that instead of using a hard line 30, which may be 
75 as long as fifteen miles between the interleaver 29 and the 
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decomiTiUtator 31, the interleaver 29 could be provided 
with a radio frequency transmitter for transmitting the 
signals and the decommutator 31 could be provided with 
a suitable receiver for receiving the signal. Such is also 
tme for the up dink portion instead of cables 21 and 7S. 

The decomrniitator 31 is s3''nchronized to the serial bit 
stream coming out of the interleaver and reconstructs the 
individual eight bit words which were originally produced 
by the pulse code modulation data gathering systems 28. 
The de commutator counts the bits of information coming 
therein and feeds reconstructed eight bit words out The 
clecommutator may consist of any conventional, weil- 
knov/ri circuits. Suitable circuits are disclosed in a publica- 
tion entitled ''ACE-S/C Data Acquisition System,” Acces- 
sion No. N69-75693, NASA.-CR- 104077. 

The information coming out o-f the deconimntator 31 is 
fed in parallel form to a down-link computer 32, as well 
as to a conventional information distribution system 33. 
The information distribution system 33 channels the in- 
coming words to appropriate meters 34 located within the 
master control room for displaying the information. The 
information distribution system also feeds the binary 
words into recorders 35 which record all of the informa- 
tion being monitored. 

The down-link computer 32 is programmed for proc- 
essing the parallel words coming therein from the de com- 
mutator 31 and for providing checks on selected v/ords 
against preprogrammed tolerances. The down- link com- 
puter 32 transmits the information to a signal generator 
and storage unit 36 for subsequent display on cathode 
ray tubes 37. The signal generator and stoi'age unit may 
consist of any conventional, w^eil-known circuits. Suitable 
circuits are disclosed in a publication entitled ‘"ACE-S/C 
A/N Display System,” Accession No. N69-75687, 
NAS.A-CR-10408L 

The cathode ray tubes 37 display the monitored in- 
formation in alphanumerical characters so that the test 
engineers can readily observe and analyze the informa- 
tion. The cathode ray tubes are provided with selecting 
dials {not shown) which permit the test engineers by 
merely rotating such to select the desired information to 
be transferred from the signal generator and storage unit 
and displayed on the picture tube. If the down-link com- 
puter 32 senses an out of tolerance signal condition in 
the information contained in one or more of the words, 
it displays this information on the cathode ray tube in 
a blinking manner so as to attract the attention of the 
engineer observing the display media. 

A shared memory 38 is interconnected between the 
up~liiik and dowm-link computers 19 and 32, respectively, 
so that information can be shared by both the computers 
for processing parameters outside of the control of the 
test engineer sitting at the consoles. For example, if the 
engineer commands a valve to open through the up- 
link portion of the acceptance checkout equipment sys- 
tem for filling a tank v/ith hydrogen to the fifty percent 
level, the down-link computer will continuously monitor 
the sensing probe associated with that particular tank 
until the fifty percent level is reached, at which time 
it will send a signal automatically to the up-link com- 
puter through the shared memory directing such to close 
the valve. The down-link computer 32 will also send 
a signal to the console to notify the test engineer that 
such has been accomplished. The np-link and down-link 
computers 19 and 32 and shared memory 38 may con- 
sist of any conventional, well-known designs. Suitable de- 
signs are disclosed in a publication entitled “ACE-S/C 
Data Processing System,” Accession No. N69-75694, 
NAS.A-C:R-104082. 

FIG. 2 illustrates in block form the communications 
unit executor circuit 18 and the start modules 16 which 
provide the interface between the test operator located 
in a control room and the up-link computer utilized with- 
in the acceptance checkout equipment system. Each com- 
mimicatioo unit executor circuit IS is capable of moni- 
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to ring two hundred and fifty-six start modules for pro- 
viding a two-way communication path over which pass 
the operator’s functional request and validity analysis 
check responses from the computer. 

^ In the particular embodiment of the invention illus- 
trated, three types of start modules are utilized: A relay 
selection start module identified as R-start module, com- 
puter communication start modules identified as C-start 
modules, and keyboard start modules identified as K- 
IQ start modules. 

The R-start module provides a means of rnamialiy 
initiating transniissions in the form of signal commands 
to a spacecraft and its associated ground support equip- 
ment, via the up-link portion of the acceptance checkout 
15 equipment system for commanding a function to be per- 
formed by the functional elements carried within the 
spacecraft and the ground support equipment. One ex- 
ample of a function which may be controlled by the 
R-start module is closing a relay, which upon closure 
20 will activate a functional component, such as a fuel cell 
circuit located within the spacecraft for testing the op- 
erability of the fuel cell. Such is discussed more fully 
below in connection with the receiver decoder. 

In order to reduce power requirements in the com- 
25 mimication unit executor, junction boxes 17 are con- 
nected between the communication unit executor and 
groups of start modules. Specifically, each junction box 
17 supplies all the necessary logic and lamp power to 
sixteen start modules. The prime function of the jiinc- 
30 tion boxes is to serve as a near proximity source of 
power to start modules which may be remote from the 
communication unit executor 18. 

In the physical construction of the R-start modules 
there are four R-start modules carried by an enclosure 
35 (see FIG. 12), each of which are adapted to be readily 
inserted and removed from a console. A typical front 
panel for an R-start module is illustrated in FIG. 3. 
Each R-start module has four split legend functional 
switches 39 mounted thereon, an execute switch XEQ, 
40 and a seal sv/itch 4®. When an operator desires to send 
a command signal to a functional element located in the 
spacecraft or its associated ground supporting equipment 
he merely depresses one or more of the functional 
switches 39 of a particular R-start module causing the 
lower half 39a of the depressed functional switches to 
be illuminated, which indicates to the operator that the 
desired command signal is ready to be executed. Each 
of the functional switches is appropriately labeled for 
identifying the function v,^hich is to be performed when 
50 such is depressed. 

After the operator has loaded the desired functional 
switches, he then presses the execute button XEQ 
which causes a signal to be initiated and transmitted to 
the program control circuit 41 located in the commimi- 
55 cation unit execute circuit via lead 42. The CUE pro- 
gram control circuit 41 sends a signal to a scanner 43 
which is scanning the 256 start modules and causes 
the scanner to stop on the R-start module which has 
been activated by the depression of the execute switch. 
(50 If the selected command is carried out, a signal is pro- 
duced by the computer 19 causing the upper-half 39b 
of the previously depressed functional switches to be il- 
luminated. Simultaneously, the upper-half of the XEQ 
switch is extinguished. Under normal conditions the data 
05 transfer will be so rapid that the XEQ switch will appear 
to remain extinguished. By means of the above sequence, 
the status of the relays under control of an operator 
will at all times be displayed on the upper-half 39^ of 
the functional switches and the status to w^hich the relays 
70 will be set by subsequent depression of the XEQ switch 
will be displayed on the lower-half 39a of the functional 
switches. 

As previously mentioned, the start modules are adapted 
to be plugged in an enclosure which includes four of 
75 such modules, and in turn, four of such enclosures are 
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electrically connected to a junction box. Each R-start 
module will have a unique eight bit address associated 
therewith, as well as a four bit functional code which 
is transmitted over leads 44 and 45, respectively. When 
the CUE scanner 43 stops at the activated R-start module 
the eight bit address signal, as well as the four bit 
functional code is transmitted over twelve lines 46 and 
stored in a buffer register 47 as a twelve bit word. The 
scanner 43 has an address register 48 associated there- 
with, which produces an address depending upon the 
location of the scanner 43 which should correspond with 
the address of the particular module being scanned. An 
address comparator 49 is provided for comparing the 
address of the scanner register 48 with the eight bit 
address transferred from the activated R-start module 
to the buffer register 47. If the scanner address and the 
activated module address which is stored in the buffer 
register 47 do not compare, then a signal is sent to a 
status register 50 by means of line 51 indicating such. 

The CUE program control 41 then causes the R-start 
module to send a second word, which is the comple- 
ment of the first word, over line 46 to an information 
complement comparator 52 located in the buffer register 
47 so that the functional portion of the transmitter word 
can be compared with its complement in order to detect 
transmission errors. If the information stored in the 
buffer register 47 does not compare with is comple- 
ment, a signal is produced by the information comple- 
ment comparator 52 and is sent to the status register 50 
indicating such via lead 51a. 

After the comparisons are made the CUE program 
control circuit 41 then sends an interrupt signal by means 
of an interrupt computer flip-flop 53 and lead 54 to the 
up-link computer 19 indicating that the CUE circuit is 
ready to transmit a command thereto. Responsive to the 
interrupt signal from the CUE program control circuit 
41 the computer then sends a coded signal by means of 
lead line 55 to the CUE program control circuit 41, 
which in turn, sends a signal to a status request gate 56 
by means of lead 57. 

The status request gate 56 causes information stored 
within the status register 50 to be transferred to the com- 
puter 19. If the address produced by the R-start module 
and the scanner address 48 do not compare, the computer 
19 sends a signal to the command monitor unit 24 indicat- 
ing such. The same is true if the function code does not 
compare with its complement. 

It is noted that the status register 50 in the embodiment 
of the invention illustrated has twelve input terminals 1 
through 12, respectively, each of which indicates that a 
specific condition exists. For example, if input terminal 
1 has been activated by a signal, such indicates that there 
has been a terminal fault, a signal on terminal 2 indicates 
manual mode select, a signal on terminal 3 indicates ad- 
dress does not compare, a signal on terminal 4 indicates 
that the command monitor unit is filled, a signal on ter- 
minal 5 indicates that the information does not compare, 
a signal on terminal 6 indicates interrupt inhibited, ter- 
minals 7, 8, and 9 are spare terminals, a signal on terminal 
10 indicates that an R-start module is requesting service, 
a signal on terminal 11 indicates a C-start or K-start 
module is requesting service, and a signal on terminal 12 
indicates CUE has an interrupt line up. The input leads 
1 through 12 are suitably wired into the circuitry for 
indicating when a particular condition exists. 

Each of output leads of the status register 50 is con- 
nected to a respective “and” gate 58. An output signal 
from the status request gate 56 is also fed to each of the 
“and” gates 58 associated with the status register 50 when 
activated. Thus, when the status request gate 56 is ac- 
tivated, signals from the status register 50 are transferred 
therefrom to the up-link computer 19'. If the information 
being transferred to the up-link computer 19 indicates that 
the system is operating properly, the computer 19 then 
sends a signal by means of lead 55 to the CUE program 
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control circuit 41 requesting that the information stored 
in the buffer register 47 be transferred thereto. The CUE 
program control circuit 41 in turn sends a signal to an 
information request gate 59 which activates all of the 
“and” gates 60 connected to the output lines of the buffer 
register 47 enabling the information from the buffer regis- 
ter 47 to be transferred to the up-link computer 19. The 
computer then sends the binary word transferred from the 
buffer register 47 back to the buffer register 47 by means 
jQ of the same leads so that such can be compared for trans- 
mission errors. If the signal sent back from the up-link 
computer 19 to the buffer register 47 compares with the 
information that was stored within the buffer register 47, 
the buffer register in turn sends a check signal back to 
15 the computer 19 indicating that there was no transmission 
error. If the signal transferred back from the computer 
19 does not compare with the information in the buffer 
register 47, the buffer register will send back a twelve 
bit word to the computer, and where the bits of the 
20 two words compare a “1” will be sent, and where the bits 
do not compare a “0” signal will be sent. The computer 
in turn sends a signal by leads 63 and 63a to the com- 
mand monitor unit 24 via CUE indicating that there is a 
transmission error. 

25 The portion of the circuit enclosed within the broken 
line 18 of FIG. 2 is all part of the communication unit 
executor illustrated in block 18 of FIG. 1. 

The start modules 16 are provided with sealed circuits 
which inhibits the function of the execute button. The 
30 sealed circuits can be automatically activated by the com- 
puter 19 which sends a signal via the communication 
unit executor and cables 40^ and 63 thereto. The com- 
munication unit executor 18 may be placed in an auto- 
matic mode for interrogating the start modules for in- 
35 formation contained therein without the test engineer 
depressing an execute button XEQ. The automatic mode 
enables the test engineer to place information in the up- 
link computer 19, which in turn, up-dates the information 
without having to press the execute button and interrupt 
40 the scanning operation of the computer 19. The computer 
in its normal scanning operation will pick up the change 
automatically and take the appropriate action for such. 

An example of a C-start module, which may be utilized 
in the acceptance checkout equipment, is illustrated in 
45 FIG. 4. 

The C-start modules shall provide to the computer by 
means of the communication unit executor 19 digital in- 
formation for selecting computer sub -routines, which in 
turn, cause coded digital words to be transmitted through 
50 the command system to a digital to analogue converter 
module DAC (see FIG. 6) located within a system of the 
space vehicle. The digital to analogue converter module 
DAC in turn generates an analogue signal responsive to 
the coded words and supplies such to a functional element 
55 causing the desired function to be performed thereon. The 
C-start module has ten selectors 64 through 73 thereon. 
Each selector has a dial 64a through 73a, respectively, 
associated therewith, so that the setting on the selector 
switches may be changed by rotating the dials, 

60 If, for example, the test engineer desires to send a 
coded signal to a particular digital to analogue converter 
module DAC located within the spacecraft for causing the 
DAC module to produce a sinusoidal wave for precessing 
a gyroscope used within the space vehicle, he would dial 
65 the code on the selector switches in the appropriate C- 
start module. The leftmost selector switch 64 would denote 
the desired function which in this particular example is 
a sinusoidal wave. The next three selector switches 65 
through 67 would denote the amplitude of the sine wave. 
70 The next three selector switches 68 through 70 would 
denote the frequency of the sine wave, and the last three 
selector switches 71 through 73 would denote the dura- 
tion of application of the sine wave. The C-start module 
automatically converts the information which was dialed 
75 therein, into four digital words, and when the execute 




button XEIQ is depressed such information is conveyed 
to the up-link computer 19 through the communication 
unit executor i$. Each of the C-start modules has an eight 
bit address similar to that of the R-start modules which 
identifies the modules. Each of the selector switches 64 ^ 
through 73 have four output leads connected thereto for 
generating a four bit functional code similar to that pro- 
duced by an R-start module (see FIG. 2). 

After the operator has loaded the desired functional 
switches, then he presses the execute button XEQ which 
causes a signal to be initiated and transmitted to the 
program control circuit 41 located in the communication 
unit execute circuit via lead 4. The CUE program con- 
trol circiiit 41 sends a signal to the scanner 43 which is 
■scanning the start modules and causes the scanner to stop 15 
on the activated C-start module. The scanner scans the 
iiifomiation from the C-start module in the form of four 
twelve bit computer words. The first word contains eight 
bits of information identifying the address for the C-start 
module and four functional bits which are produced by 20 
the selector switch 65. The first word is sent to the CUE 
and the eight bit address and four bit function which 
constitutes the word are compared for transmission errors 
in the same manner as were the signals from the pre- 
viously described R-start modules. The scanner then 25 
moves on to the next word which consist of twelve binary 
bits of information produced by the selector switches 65, 

66 and 67. After a comparison has been made for trans- 
mission errors v/ithin the communication unit executor 
18 the third and fourth words are transmitted from the 30 
C-start register in a like manner. Other type start mod- 
ules may be utilized for controlling functional systems 
witliin the space vehicle, such as a K-shart module, which 
is adapted to send digital words through the computer 
to the guidance and navigational control system for the 35 
space vehicle in order to check out such. The junction 
box 17, communication unit executor 18 and C-start, 
K-start, and R-start modules may consist of any con- 
ventional, well-known designs. Suitable designs for these 
elements are disclosed in a publication entitled “ACE~S/C 40 
Data Entry Equipment,” Accession No. N 6 9-75 691, 
NASA™CR-~104083. 

After the computer 19 receives the command signals 
from the communication unit executor 18, it transmits two 
binary coded v/ords consisting of twelve bits each to a 
selected data transmission and verification converter 20 
associated with a particular digital test command system 

22 located within the spacecraft or its associated ground 
support equipment. The information coming into the com- 
puter 19 from the CUE 18 determines which digital test 
command system 22 v/ill be selected. 

As previously mentioned, the data transmission and 
verification converter 20 receives the two twelve bit paral- 
lel words from the computer and transmits a message of 
forty-eight bits of information in serial form to the re- 55 
ceiver decoder 23 located in the digital test command 
system associated with the spacecraft or the ground sup- 
port equipment. The data transmission and verification 
converter may consist of any conventional, well-known 
circuits. Suitable circuits are disclosed in a publication en- go 
titled ‘ViCE-S/C Computer Peripheral Equipment,” Ac- 
cession No. N69-75690, NASA-CR-1 04076. 

The data transmission and verification converters 26 
also receive coded messages from the receiver decoders 

23 which indicates whether a transmission error has taken 05 

place between the data transmission and verification con- 
verters and the modules under control of the computer 
located within the spacecraft or ground support equip- 
ment. Such information is transmitted over a coaxial 
cable as illustrated by lead line 75 in FIG. 1. 70 

Information from the computer by way of the data 
transmission and verification converter 20 is accepted by 
a receiver decoder 23 of a particular digital test com- 
mand system 22. The components of the receiver de- 
coder are illustrated in FIG. 6, and are enclosed within 75 



the broken line 23. The forty-eight bit bi-polar message 
being transmitted by a data transmission and verification 
converter 20 is first fed to an amplifier circuit 73 which 
matches and equalizes the coaxial cable 21 so as to avoid 
signal degradation. The signals coming from the data 
transmission and verification converter 20 are supplied via 
an amplifier circuit 76 to a timing regenerator circuit 77. 
Each time the bi-polar signal crosses a zero reference line 
a clock pulse is generated within the timing generator 
for controlling a strobing signal for determining by sam- 
pling the second half of the bi-poiar bit if such is a 
binary “1” or a binary “0.” If the strobe signal is nega- 
tive, such vriii indicate that the signal is a binary “0,” 
whereas, if the strobe signal is positive, such indicates that 
the binary signal is a ‘T.” The timing generator 77 trans- 
mits the results of a forty-eight bit count via lead 78 to 
a check status register 79. If the count is other than 
forty-eight bits there is a transmission error, and the 
check status register 79 sends a message back by means 
of cable 75 to the data transmission and verification con- 
verter 20 and the computer 19 indicating such. 

The timing regeneration circuits also counts the bits 
of information coming therein and decodes the message 
into four groups of twelve bit words, the first and third 
twelve bit word being a data word, and the second and 
third twelve bit word being a redundant word of a re- 
spective data word. These four twelve bit words are then 
routed to a staticizing register 80. The staticizing register 
consists of two twelve bit shift registers which are used 
to store the actual message content of the forty-eight bit 
message. The redundant bits are not stored. The first 
twelve bits are stored in one twelve bit section and the 
next twelve bit word of redundant data is compared bit 
by bit with the contents of the shift register. If the re- 
dundancy check fails, a transmission error is generated 
which is fed to the check status register 79 and simul- 
taneously inhibits further processing of the message. If 
there is no error, the next twelve bits are stored in the 
second twelve bit section of the staticizing register and 
compared with the next group of redundant bits in the 
same manner. Following the acceptance of the message, 
the shift register contents are fed into a group select de- 
coder 81 in the form of a twenty-four bit word. One ex- 
ample of a twenty-four bit word, which is utilized to 
transmit information to a relay buffer memory subgroup 
located within a module in the digital test command 
system 22 of the spacecraft or its ground support equip- 
ment is illustrated in FIG. 7. 

Referring briefly to the message illustrated in FIG. 7, 
it can be seen that the bit 2^3 is a spare bit of information 
and is not being used in selecting the desired relay buffer 
memory subgroup. The next four bits 2^® through 2^2 
are used to select a base plate group. The following four 
bits 2^5 through 2^3 are utilized to select one of eight 
base plates located within the previously selected group. 
The next three bits 2^2 to 2^4 are utilized to select a 
module which may be an R module which consists of 
sixteen relays or a digital to analogue converter module. 
The next two bits 2^° or 2^^ designate whether the in- 
formation should be stored in a buffer memory or whether 
the information should be first compared with the in- 
formation sent from the staticizing register before being 
transferred to the relays. The next four bits of informa- 
tion 2® through 2® are provided for selecting one of the 
relay subgroups, each of which include four relays. The 
next four bits of information 2^ through 2^ are utilized 
to activate one or more of the four relays within a par- 
ticular subgroup. In the particular message illustrated in 
FIG. 7 the bits 2® and 2^ are not being utilized. 

Referring back to FIG. 6, the group select decoder 
checks the four address bits 2^^ through 2^2 for legality 
and provides the proper gating if the address is correct. 
If the address indicates no error, an enabling signal is sent 
by lead 81a to all of the base plates located in each 
group and the bits 2^ through 2^® are transmitted to one 
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of the four groups A through D depending on the code 
being sent or to a guidance and navigational unit 82. 
If the four bits of information 2^9 through 2^2 contained 
information which was not proper for selecting one of the 
groups A through D, or the guidance and navigational 
unit 82 an error signal would be sent from the staticizing 
register 80 to the check status register 79, which in turn, 
conveys the information back to the computer 19 and the 
message is inhibited from being transmitted further into 
the circuitry. For the purpose of illustration, the informa- 
tion illustrated in FIG. 7 will be traced throughout the 
entire circuit in order to illustrate the components being 
activated by such. 

Each of the groups of base plates A through D include 
eight base plates 83, each of which has a group of four 
modules plugged therein. The modules may be R modules, 
each of which includes sixteen relays, or may be digital 
to analogue converter modules referred to as DAC. Re- 
ferring to FIGS. 6, 9 and 9 A, it can be seen that the 
bits of information labeled 2 ^^ 2^® are fed to all of the 

base plates within the group and depending upon the 
code set up by the bits of information such selects one 
of eight of the base plates 83. The bits of information 
2^5 to 2^® are also fed to an error detection logic circuit 
84 which determines if the bits of information are a legal 
address for selecting one of the eight base plates. 

If an illegal address exists, the word shall not be gated 
to the remaining translating circuitry and an error signal 
is sent by the error detection logic circuit 84 to the check 
status register 79 which in turn sends a coded signal by 
means of cable 75 through a data transmission and vertifi- 
cation converter 20 to the computer 19. False or error 
detection logic circuits, such as illustrated at 84, are 
associated with each base plate 83 throughout the entire 
circuitry. 

After one of eight of the base plates of any group has 
been selected the bits 2^^ to 2^^ are fed into a module 
select 85 which selects one of the four modules labeled 
R or DAC in FIG. 6, as well as in FIGS. 9 and 9A. 
The module select circuit 85 also has an error detection 
logic circuit 86 associated therewith, for recognizing 
legal addresses for selecting one of four of the modules. 
If an illegal address exists in the coded bits 2^2 through 
2^‘ then the error detection logic circuit 86 sends a signal 
to the check status register 79 indicating such. The check 
status register in turn conveys such information by means 
of cable 75 to the up-link computer 19. 

Each of the R or DAC modules incorporate a logic 
circuit therein for responding to a command directed 
by the bits 2 ^® and 2-^. Assuming that the R module was 
selected by the module select 86, if the bit 2^^ is a '‘V 
and the bit 2^° is a “0,'' such would be an execute com- 
mand for a relay module. If the bit 2^^ were a “0” and 
the bit 2^9 were a such would command the relay 
module to load a buffer memory. If the bit 2^^ were a “1” 
and the bit 2^® were a ''0” and the module selected were 
a DAC module, such would indicate that the analogus 
signal should produce a negative potential output. If the 
relay module were a DAC module, and the bit 2^^ 
were a "'0/’ the bit 2^® were a 'T,” such would command 
the DAC module to produce an output signal having a 
positive potential. All other combinations which are pos- 
sible to be produced by the 2^^ and 2 ^® arc recognized 
as being illegal. If an illegal combination exists, the re- 
maining information (bits 2® through 2®) shall receive no 
further translation, and a signal is sent to the check status 
register 79 indicating such. 

Assuming that the bit 2^® is a 'T' and the bit 2^^ is a 
'‘0/' as is the case of the message illustrated in FIG. 7, 
and the module selected is a relay module, a signal is 
sent to a buffer memory 88 which is associated with the 
relay module via lead 91 (see FIG. 9A). 

The buffer memory 88 includes four subgroups corre- 
sponding to the subgroups 1, 2, 3, and 4, respectively, in 
a particular module. Each of the subgroups of the relay 
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module contains four relays thus, the entire relay module, 
such as illustrated at R, contains sixteen relays. 

The buffer memory 88 is capable of storing sixteen 
bits of information. The bits of information 2® through 
g 29 are fed through an error deletion circuit 89 which 
determines if such is illegal or legal address. If they con- 
tain an illegal address, a signal will be sent to the check 
status register 79 indicating such, which will in turn send 
a signal by the coaxial cable 75 to the up-link computer 
jQ 19. If the address is a legal address, an enable signal is 
sent by the error detection circuit 89 to its associated, 
subgroup decoder 90 via lead 90a and the signals 2® 
through 29 are sent to the subgroup decoder 90 which 
selects one of the subgroups, generally designated as 1, 2, 
15 3 and 4, respectievly. If the mode code (l^® and 2^^) com- 
ing in one line 91 is a load buffer memory signal as in 
indicated in FIG. 7, the information contained in. the bits 
22 through 2® is fed into the load buffer memory and tem- 
porarily stored there. However, if bit 2^^ is a “1” and bit 
20 2^9 is a “0,'' which is an execute comand, the four bits 
(bits 2^ to 22) of information coming from the staticiz- 
ing register 80 via leads SSe shall be compared with the 
information stored in the buffer memory of the subgroup 
specified by the bits 29 through 2®. If the contents of the 
25 information in the buffer memory 88 compares with the 
contents of the information coming from the staticizing 
register 80, an execution memory 92 shall be loaded from 
one of the buffer memory subgroups 88a through 88d. 
The signal for activating the execution memory 92 is 
30 received from mode decode via lead 91. The execution 
memory subgroup shall immediately actuate the relays in 
one of the subgroups 1, 2, 3 or 4 with the information con- 
tained in the bits 22 through 2^. For example, if bit 22 
were 'T” and bits 2^, 2^ and 2^ were “0"' and subgroup 
35 “1” were selected then relay 1-1 of subgroup 'T' would 
be energized, while relays 1-2, 1-3 and 1-4 would re- 
main de-energized. The relays are connected in a suit- 
able circuit, containing a power supply, which is activated 
by the bits 22 to 2^. 

Each of the relays located within the relay module 
has a contact connected in a circuit which includes a 
functional element located within the spacecraft. Only 
the relays 1-1, 1-2 and 4-3 are illustrated in FIG. 9 as 
being connected in a circuit associated with the func- 
tional element. In operation, if the relay 1-1 were se- 
lected to be closed by the binary coded information con- 
tained in the bits 22 through 2®, such would close its con- 
tact 93. It is noted that the contact 93 is connected in 
shunt with a control switch 94 carried within a space- 
5 Q craft. The control switch 94 is in turn connected in a fuel 
cell circuit which includes a fuel cell 95, and a relay 96, 
which upon energization closes the fuel cell circuit. The 
fuel cell 95 supplies power to the instrument nanel lights 
97, as well as to telemetry transmitter 98. Normally, the 
55 control switch 94 is closed by an astronaut. However, dur- 
ing the checkout operation when the relay 1-1 is ener- 
gized closing contact 93 such completes the circuit to the 
relay 96 located in the fuel cell circuit energizing such 
which in turn closes contact 96a. A transducer 99, con- 
60 nected in the fuel cell circuit, will sense energization of 
the fuel cell circuit and during the monitoring operation 
will transmit a signal to the control room through the 
down-link portion of the system for indicating to the test 
engineer whether the fuel cell is operating properly. The 
65 instrument panel lights may be checked out in a similar 
manner by energization of the relay 1-2 and shunting the 
control switch 100. The telementry transmitter 98 is 
checked out by closing or energizing relay 4-3. Relay 
contact 101 is connected in shunt with the telemeti-y trans- 
70 mitter control switch 102 so that when the relay 4-3 is 
energized the contact 101 will shunt the control switch 
permitting the telemetry transmitter to be energized. The 
relays carried within the relay module may be of the latch- 
ing type or the non-latching type. One advaiita.ge i.n using 
75 latching type relays is that if there is a power failure 
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after a coded signal has been routed to a particular relay, 
the relay will not disengage thereupon. 

The digital! test command system portion of the ac- 
ceptance checkout equipment is program passive. For 
example, if such is commanded to a state, it remains in ^ 
that state until commanded to change. This concept per- 
Blits absolute step control over the digital test command 
system output to the system under test. Every time a 
step is transmitted in the digital test command system, a 
check status reply is received back at the computer com- jq 
plex indicating the disposition of the command and what, 
if any, failure occurred. 

The manner in which the digital to analogue converter 
module referred to as a DAC module is selected in simi- 
lar to that as previously described in selecting a relay 15 
module. An example of a message used to select the 
DAC module is illustrated in FIG. 8. A block diagram 
of the circuitry used for selecting the DAC module is 
illustrated in FIG. 10. The bits 2^^ through 2^3 shown 
in fig. 8 are utilized to select the proper DAC module 20 
and such is accomplished in the same manner as the 
previously described R module was selected. The bits of 
ioformation 2^^ and 2i^ designate the polarity for the 
analogue function which is to be produced by the DAC 
module. The bits 2^ through 2^ represent the output volt- 25 
age that is to be produced by the analogue module DAC. 

The bits 21 and 2^ act as control bits of information trans- 
ferred v/ithin the analogue module DAC. 

Referring to FIG. 11, which illustrates in block form, 
a DAC module, the module includes a sign decoder 103, 30 
a mode decoder 104, a load buffer memory circuit 105, 
a buffer mem.ory circuit 106, a data comparator circuit 
107, and an execute memory circuit 108. Signals coming 
from the group selector associated with the staticizing 
register are fed in over a plurality of lines indicated as a 35 
single line 109 in FIG. 11. As previously mentioned, the 
two bits 2^^ and 2^^ are fed into the sign decoder 103 
and designates the polarity of the output analogue signal 
which is to be produced. The information contained in 
the bits 2^ through 2^ coming from the staticizing register 
is fed directly into the buffer memory 106 to load such. 

It is also available at the data comparator input 107a. 
The bits 2^ and 2^ act as control bits of information for 
transferring the information contained in the bits 2^ 
through 29 within the DAC module. Control of informa- 
tion within the module shall be as follows: When 2^ is a 
"‘0” and 2'^ is a ‘T” the information from the staticizing 
register is fed directly into the buffer memory 106. When 
2^ is a 'T” and 2 ^ is a “0” the contents of the buffer 
memory 108 are checked against the contents supplied by 
the staticizing register in the data comparator 107, and 
if the check is good the buffer memory contents are 
shifted to the execute memory 108, which generates an 
output voltage as directed by the information. If the 
signals 2 ^ is a ‘T” and the signal 2^ is a “1” the contents 
of the staticizing register is shifted directly to the execute 
memory 108, and the digital to analogue conversion is 
effected immediately without a buffer memory check. If 
the control mode of information contained in the bits 2° 
and 2" are both “0” when such is fed to the mode decoder 
104, an error signal is sent to the control status register 
79. Thus, it can be seen that the mode decoder determines 
whether the load buffer memory shall send an enable sig- 
nal to the buffer memory 106 to load the incoming infor- 
mation therein, or feed the information directly to the 
execute memory 108. The mode decoder 104 can also send 
a signal to the buffer memory 106 which causes the 
information stored in the buffer memory to be compared 
with the information coming from the staticizing register. 
•NormaHy, it takes several word messages transmitted in 
succession to construct an analogue signal. 

Only the operation of an R or relay type module and a 
DAC or analogue module have been described in detail. 
Ho-wever, it is to be pointed out that it is within the scope 
of the invention to utilize other types of modules, such 75 
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as a conventional guidance and navigation module which 
generates signals into an onboard guidance computer 
located within the spacecraft. The guidance and navigation 
module is generally controlled by the K-start module lo 
cated within the control room. The guidance and navi 
gational module may consist of any conventional, wen- 
known design. One suitable design is disclosed in a publi- 
cation entitled “ACE-S/C Equipment System Descrip- 
tion,” Accession No. N69--75685, NASA-CR-104078. 

FIG. 12 illustrates a console which is utilized for hous- 
ing the start modules which are associated with the com- 
mand system and the data display media forming a part 
of the monitoring system. The test engineer sits in front 
of the console and by depressing buttons or selector 
switches on the modules sends his command signals to 
the spacecraft and its associated ground support equip- 
ment. The signals coming back through the monitoring 
system or down-link system are displayed on the cathode 
ray tube 37 in alphanumerical characters, or may be dis- 
played by the analogue meters 110. The information being 
received through the monitoring system may also be dis- 
played by discrete “on-off” lights located in the meters, 
generally designated at 111 and 112. Thus, it can be 
seen that the information under control of the test engi- 
neer sitting at the console is co-ordinated, since the dis- 
play media and the control start modules are located di- 
rectly in front of him for visual observation. 

It is to be understood that the above described space- 
craft checkout system may be used to check out any 
aerospace or industrial related equipment or system. The 
checkout system may also be connected to another 
similar checkout system or a plurality of checkout systems 
for the purpose of providing appropriate communications 
therebetween. For example, additional data transmission 
and verification converters 20 may be connected to the 
up-link computer 19 to provide communications between 
the data transmission and verification converters of other 
similar checkout systems, such as, the checkout systems 
for the various booster stages of a space vehicle. A re- 
mote display capability for the checkout system may be 
further provided by including an additional data trans- 
mission and verification converter 20 connected between 
the down-link computer 32 and a remotely located dis- 
play unit consisting of an additional data transmission 
and verification converter 20, signal generator and storage 
unit 36, cathode ray tubes 37, and any necessary inter- 
facing components. 

Obviously, numerous modifications and variations of 
the present invention are possible in light of the above 
teachings. It is, therefore, to be understood that within 
the scope of the appended claims the invention may be 
practiced otherwise than as specifically described. 

What is claimed and desired to be secured by the 
United States Letters Patent is: 

1. A command system for functional components of 
a space vehicle and its associated supporting equipment 
for conveying command signals from a remote command 
center to the functional components comprising: 

(A) a plurality of start modules located in a remote 
command center; 

(B) means for selectively activating a start module 
for generating a command signal in digital form 
identifying a particular functional component and 
the function to be performed thereon; 

(C) a communication means for scanning said start 
modules and temporarily storing the command signal 
from an activated module; 

(D) a transmission validity checking circuit forming 
a part of said communication means for comparing 
the transmitted command signal with a redundant 
command signal for determining transmission errors; 

(E) a computer coupled to the output of said communi- 
cation means for receiving the command signal from 
said communication means and generating a func- 
tional code responsive thereto; 
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(F) data transmission and verification converting 
means coupled to the output of said computer for 
transforming said functional code into a set of 
sequential digital words comprising a frame of bits 
and its complement for transmission over long dis- ^ 
tances with a minimum of degradation; and 

(G) a receiver decoder coupled to the output of said 
data transmission and verification converting means 
for comparing each frame of sequential bits with 

its complement and for transmitting a signal indica- jo 
tive of the desired function to be performed to 
the selected functional component when said frame 
of bits compares with its complement. 

2. The command system as set forth in claim 1, where- 
in said start modules generate a plurality of identifying 15 
parallel bits of information when activated and wherein 

a portion of said parallel bits represent an address and 
the remainder of the parallel bits represent a particular 
function to be performed. 

3. The command system as set forth in claim 1, where- 20 
in said receiver decoder converts the sequential bits of 
information coming therein into words of parallel bits. 

4. The command system as set forth in claim 1, where- 
in said computer transmits a signal to said activated 
start module responsive to activating a functional compo- 25 
nent for indicating that such function has been carried out. 

5. The command system as set forth in claim 1 further 
comprising: 

(A) a coaxial cable; 

(B) one end of said coaxial cable being connected 30 
to the output of said data transmission and verifi- 
cation converting means; and 

(C) the other end of said coaxial cable being con- 
nected to the input of said receiver decoder; 

(D) whereby said frame of bits and its complement 35 
are transmitted in serial form from said data trans- 
mission and verification converter over said cable 

to said receiver decoder. 

6. A monitoring device for functional components 
located in systems such as incorporated in a space vehicle 4() 
and its associated supporting equipment comprising: 

(A) a plurality of sensing transducers carried in each 
system for sensing the operability of said compo- 
nents; 

(B) a pulse code modulator for receiving the signals 
from the sensing transducers of a system and con- 
verting said signals into words of sequential bits of 
digital information; 

(C) means for interleaving the words of sequential 
bits of digital information from the pulse code 
modulator of said system for producing a sequential 
chain of binary bits of information; 

(D) a remotely located decommutator provided for 
receiving said chain of binary words from said inter- 
leaving means; 

(E) said decommutator reconstructing the sequential 
chain of binary bits of information into binary words 
and feeding said reconstructed words out; 

(F) a computer provided for receiving the binary 
words from said decommutator and checking selected 
words against preprogrammed tolerances; 

(G) said computer converting said binary words into 
signals capable of activating display media; and 

(H) display media located in a control room connected 

to the output of said computer for receiving said _ 
signals from said computer and producing informa- 
tion in the form adapted to be recognized by the 
human eye and comprehended by test engineers. 

7. The monitoring device as set forth in claim 6, where- 
in said display media includes cathode ray tubes pro- 
ducing information in engineering units utilizing alpha- 
numeric characters; which information is capable of 
being readily understood and used by test engineers. 

8. A system for receiving a message including a plural- 
ity of serial binary words and their redundants for select- 75 
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ing a particular functional component and commanding 
a particular function to be performed thereon comprising: 

(A) means for comparing said binary words against 
their redundants and generating error signals when 
said binary words fail to compare with their redun- 
dants; 

(B) said functional components being electrically con- 
nected in groups and units; 

(C) means for utilizing a first portion of said message 
for selecting a particular group in which a desired 
functional component is connected; 

(D) means for checking said first portion of said mes- 
sage for determining if said first portion contains 
a legal address; 

(E) means for utilizing a second portion of said mes- 
sage for selecting a particular unit in which a desired 
functional component is connected; 

(F) means for checking said second portion of said 
message for determining if said second portion con- 
tains a legal address; 

(G) means for utilizing a third portion of said mes- 
sage for selecting a particular functional component 
of a unit; 

(H) means for checking said third portion of said 
message for determining if said third portion con- 
tains a legal address; and 

(I) a fourth portion of said message being trans- 
mitted to a functional component for directing a 
particular function to be performed thereon; 

(J) whereby said message is transmitted through a 
plurality of selecting and checking means in a step 
by step manner so that any malfunction in said 
circuitry and message is isolated and appropriate 
action can be taken for remedying the malfunction. 

9. The system as set forth in claim 8 wherein : 

(A) said selected functional component is a digital 
to analogue converting module; and 

(B) said digital to analogue converting module con- 
verts said fourth portion of said message into an 
analogue signal. 

10. The system as set forth in claim 9, wherein said 
digital to analogue converting module utilizes a plurality 
of binary messages in constructing an analogue output 
signal. 

11. The system as set forth in claim 8 further com- 
prising: 

(A) means for converting said message which includes 
a plurality of serial binary words and their redun- 
dants into a single binary word of parallel form 
prior to such being transmitted to said selecting and 
checking means. 

12. The system as set forth in claim 8 wherein: 

(A) said selected functional component is a relay 
module; 

(B) a plurality of relays included in said relay module; 
and 

(C) means for energizing selected relays within said 
module according to information contained in said 
fourth portion of said message. 

13. A command and checkout system for functional 
components of a space vehicle and the like comprising: 

(A) a plurality of start modules located in a remote 
command center; 

(B) means for selectively activating a start module 
for generating a command signal in digital form 
identifying a particular functional component and 
the function to be performed thereon; 

(C) a communication means for scanning said start 
modules and for receiving command signals there- 
from; 

(D) a command computer coupled to the output of 
said communication means for receiving the com- 
mand signal from said communication means and 
generating a functional code responsive thereto; 

(E) said computer being programmed for producing 
predetermined command signals; 




(F) a digital test command system for receiving said 
command signals from said command computer; 

(G) said digital test command system transmitting a 

signal indicative of the desired function to be per- 
formed to a desired functional component; ^ 

(H) a pulse code modulation monitoring system for 
monitoring said functional components and generat- 
ing a signal indicative of the operability of said 
functional components; 

(I) a monitoring computer for receiving signals from 
said pulse code modulation system; 

(J) said monitoring computer being programmed for 
checking said signals against predetermined toler- 


providing two-way communication therebetween; and 
(L) display media means connected to the output of 
said monitoring computer for displaying said signals 
from said monitoring computer in engineering units. 
14. A command and checkout system as defined in 
claim 13 wherein said command computer and said moni- 
toring computer operate at independent and different 
speeds. 
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ances; 

(K) a shared memory connected between said com- X5 
mand computer and said monitoring computer for 340 — 146.1 
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